Hate asking but with my KH watching taking place from the comfort of my fully adjustable vibratin...

[G+_Rud Dog]

Hate asking but with my KH watching taking place from the comfort of my fully adjustable vibrating bed it is just hard to note where I heard what.

Padre was talking about a piece of software which allowed you to see all devices on your LAN via mac addresses. Does anyone remember either the episode or name of the software?

[G+_Eddie Foy]

nmap? arp? AngryIP

nmap is my goto:  nmap -sV -O -T 5 192.168.0/24

[G+_Andrew Giebel]

Was that KH or was it TWiET?

[G+_Rud Dog]

Searching the videos as we speak.

[G+_Tyler Pearson]

If you want something fast and easy just for local lan ip addressees and MAC addresses and have an ios device I have use an app called Fing in the past with good success. Since apple locks down what you can and cant do its not as good as many of the android apps to or PC options that are out there.

[G+_Rud Dog]

Tyler Pearson Looking for something which will find all devices on the LAN. For instance some devices come with IP addresses not in your range like my LAN is using 192.168.1.0/24 and if the device is on 192.168.10.1 then it will not be found. For sure knowing the address like 192.168.10.1 makes it easy but what if you don't know the ip address? This is appeal for using search by mac address it will find all devices via the mac address, if that is what padre was referring to.

[G+_Eddie Foy]

Nmap. Just adjust the IP range.

If you want passive, wireshark/tshark/tcpdump and filter for arp and DHCP  broadcasts.

[G+_Walter L. McCormick]

The android app "net scan" also will show all ip's and MAC addresses on the LAN

[G+_Rud Dog]

Eddie Foy Still haven't gotten around to learning how to fully use Wireshark and now they upgraded it and am really lost.

But I am sure there are videos for learning.

 

Would be nice if there was sw which I could click on anytime generating a report. I know my current sw will find for example 192.168.1.0/24 but how about those that are not in that range? Don't want a long list of every subnets which I have to manually enter.

 

Pretty sure what you are saying is the way to go but seems like a hassle when I don't use it everyday and just give up when can't remember the commands for scanning for all that is on my LAN.

[G+_Eddie Foy]

batch file with text file output set to run as a scheduled task (if windows) or a cron job is linux/mac.

. 

Zenmap (the GUI) of nmap displays the results nice.

 

Anything thats not 'in' your subnet, wasn't assigned an IP from your DHCP server; but had to be manually assigned (if its on your LAN)

nmap will take CIDR, 192.168.1.0/24 or a /20 or what ever to expand the scope. (you could use it to scan the entire internet, but there are better programs for that)

[G+_Rud Dog]

Have an old drobo and some other items and they have odd ip addresses outside the subnet 192.168.1.0/24. This would be nice if a piece of software sitting on my desktop could find for me without reinventing the wheel. Also if for some reason a device were to get onto my lan it would be nice to be able to see it if it was outside my lan ip address subnet.

[G+_Ben Reese]

I'm curious how a ping scan could tell you what's inside your network and not just on the Internet unless you disconnect the Internet completely. If your using a 192.168.1.0/24 network and you ping 192.168.200.1, the router would theoretically pass that ping through the WAN port and out to the Internet. Perhaps if you were to set a low TTL?

 

And maybe you could ask each MAC what it's IP is. That only work if you know (or can find) the address of everything on your network.

[G+_Eddie Foy]

Ben Reese  I wouldn't rely on a ping scan.  Not everything responds to them.  A lot of my Windows VMs, I have to turn it on in the firewall (ICMP being off by default).  nmap's -Pn turns off ping scan.

[G+_Rud Dog]

Ben Reese Grain of salt because going from memory. There are certain class of subnets which are specifically used for within your private LAN and are not routable. They won't see the light of day on the WAN. This particular address set I use is one of those addresses. Brief but sure others will make it clear if I mangled this answer.

[G+_Eddie Foy]

It will probably get out of your router (my cable modem is the typical 192.168.1.100 and its out of my subnet and the router gets me there)  Your ISP will/should block it at the gateway.

[G+_Ben Reese]

Eddie Foy exactly. I think every cable/DSL modem I've used has been at that IP. I've also used routers behind routers (like 3 dumb routers) and been able to reach the management page from a couple layers deep.

[G+_Eddie Foy]

Anything beyond the router's subnet setting will get forward; that's the point of the subnet setting.

[G+_Steve Martin]

192.168.0.0/16 is private ip only and will not route to open Internet, also 10.0.0.0/8 as I recall.

[G+_Eddie Foy]

and 172.16.0.0

[G+_Ben Reese]

But your router doesn't care and will send that traffic out anyhow.

[G+_Rud Dog]

Steve Martin Thanks. So only the /16 are private of the 192.168.1.0 and the /8 of the 10.0.0.0? Learning stuff all the time. Thanks.

[G+_Dan Molseed]

I think he mentioned http://whoisonmywifi.com/ once.